3.8.7 Administrative Requirements of the Privacy Rule
The HHS acknowledges that covered organizations come in different sizes. Thus, the Rule’s adaptability and scalability are designed to enable covered organizations to assess their issues and implement suitable solutions for theirparticular environments.
What is acceptable for a particular covered entity will vary according to its business type, size, and financial resources.